diff --git a/.github/workflows/android_build.yml b/.github/workflows/android_build.yml
index a0efe9cdf0fdd..ace3e9860e3ca 100644
--- a/.github/workflows/android_build.yml
+++ b/.github/workflows/android_build.yml
@@ -19,11 +19,12 @@ jobs:
     timeout-minutes: 90
     steps:
     - uses: actions/checkout@v1
-    - uses: actions/setup-java@v1
+    - uses: actions/setup-java@c3ac5dd0ed8db40fedb61c32fbe677e6b355e94c
       with:
         java-version: '8'
         java-package: jdk
         architecture: x64
+        distribution: zulu
     - name: 'Install dependencies'
       run: cd mobile && ./ci/mac_ci_setup.sh --android
     - name: 'Build envoy.aar distributable'
@@ -42,11 +43,12 @@ jobs:
     timeout-minutes: 50
     steps:
     - uses: actions/checkout@v1
-    - uses: actions/setup-java@v1
+    - uses: actions/setup-java@c3ac5dd0ed8db40fedb61c32fbe677e6b355e94c
       with:
         java-version: '8'
         java-package: jdk
         architecture: x64
+        distribution: zulu
     - run: cd mobile && ./ci/mac_ci_setup.sh --android
       name: 'Install dependencies'
     - name: 'Start simulator'
@@ -74,11 +76,12 @@ jobs:
     timeout-minutes: 50
     steps:
     - uses: actions/checkout@v1
-    - uses: actions/setup-java@v1
+    - uses: actions/setup-java@c3ac5dd0ed8db40fedb61c32fbe677e6b355e94c
       with:
         java-version: '8'
         java-package: jdk
         architecture: x64
+        distribution: zulu
     - name: 'Install dependencies'
       run: cd mobile && ./ci/mac_ci_setup.sh --android
     - name: 'Start simulator'
@@ -106,11 +109,12 @@ jobs:
     timeout-minutes: 50
     steps:
     - uses: actions/checkout@v1
-    - uses: actions/setup-java@v1
+    - uses: actions/setup-java@c3ac5dd0ed8db40fedb61c32fbe677e6b355e94c
       with:
         java-version: '8'
         java-package: jdk
         architecture: x64
+        distribution: zulu
     - name: 'Install dependencies'
       run: cd mobile && ./ci/mac_ci_setup.sh --android
     - name: 'Start simulator'
@@ -138,11 +142,12 @@ jobs:
     timeout-minutes: 50
     steps:
     - uses: actions/checkout@v1
-    - uses: actions/setup-java@v1
+    - uses: actions/setup-java@c3ac5dd0ed8db40fedb61c32fbe677e6b355e94c
       with:
         java-version: '8'
         java-package: jdk
         architecture: x64
+        distribution: zulu
     - name: 'Install dependencies'
       run: cd mobile && ./ci/mac_ci_setup.sh --android
     - name: 'Start simulator'
diff --git a/.github/workflows/android_tests.yml b/.github/workflows/android_tests.yml
index 1ecd972125e98..db85cbf3dc2ef 100644
--- a/.github/workflows/android_tests.yml
+++ b/.github/workflows/android_tests.yml
@@ -33,11 +33,12 @@ jobs:
           fi
     - name: 'Java setup'
       if: steps.check_context.outputs.run_tests == 'true'
-      uses: actions/setup-java@v1
+      uses: actions/setup-java@c3ac5dd0ed8db40fedb61c32fbe677e6b355e94c
       with:
         java-version: '8'
         java-package: jdk
         architecture: x64
+        distribution: zulu
     - name: 'Install dependencies'
       if: steps.check_context.outputs.run_tests == 'true'
       run: cd mobile && ./ci/mac_ci_setup.sh
@@ -70,11 +71,12 @@ jobs:
           fi
     - name: 'Java setup'
       if: steps.check_context.outputs.run_tests == 'true'
-      uses: actions/setup-java@v1
+      uses: actions/setup-java@c3ac5dd0ed8db40fedb61c32fbe677e6b355e94c
       with:
         java-version: '8'
         java-package: jdk
         architecture: x64
+        distribution: zulu
     - name: 'Install dependencies'
       if: steps.check_context.outputs.run_tests == 'true'
       run: cd mobile && ./ci/mac_ci_setup.sh
@@ -117,11 +119,12 @@ jobs:
           fi
     - name: 'Java setup'
       if: steps.check_context.outputs.run_tests == 'true'
-      uses: actions/setup-java@v1
+      uses: actions/setup-java@c3ac5dd0ed8db40fedb61c32fbe677e6b355e94c
       with:
         java-version: '8'
         java-package: jdk
         architecture: x64
+        distribution: zulu
     - name: 'Install dependencies'
       if: steps.check_context.outputs.run_tests == 'true'
       run: cd mobile && ./ci/linux_ci_setup.sh
diff --git a/.github/workflows/asan.yml b/.github/workflows/asan.yml
index e2d08b359dedb..d708dde3dc537 100644
--- a/.github/workflows/asan.yml
+++ b/.github/workflows/asan.yml
@@ -36,12 +36,13 @@ jobs:
             echo "Skipping tests."
             echo "run_tests=false" >> $GITHUB_OUTPUT
           fi
-    - uses: actions/setup-java@v1
+    - uses: actions/setup-java@c3ac5dd0ed8db40fedb61c32fbe677e6b355e94c
       if: steps.check-cache.outputs.cache-hit != 'true'
       with:
         java-version: '8'
         java-package: jdk
         architecture: x64
+        distribution: zulu
     - name: 'Run tests'
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml
index 281ca91296087..f07ddd0f6c31a 100644
--- a/.github/workflows/format.yml
+++ b/.github/workflows/format.yml
@@ -65,11 +65,12 @@ jobs:
     timeout-minutes: 45
     steps:
     - uses: actions/checkout@v1
-    - uses: actions/setup-java@v1
+    - uses: actions/setup-java@c3ac5dd0ed8db40fedb61c32fbe677e6b355e94c
       with:
         java-version: '8'
         java-package: jdk
         architecture: x64
+        distribution: zulu
     - run: cd mobile && ./ci/mac_ci_setup.sh
       name: 'Install dependencies'
     - name: 'Run Kotlin Lint (Detekt)'
diff --git a/.github/workflows/tsan.yml b/.github/workflows/tsan.yml
index 8431e4606ca96..e2f6b8e0691fb 100644
--- a/.github/workflows/tsan.yml
+++ b/.github/workflows/tsan.yml
@@ -36,12 +36,13 @@ jobs:
             echo "Skipping tests."
             echo "run_tests=false" >> $GITHUB_OUTPUT
           fi
-    - uses: actions/setup-java@v1
+    - uses: actions/setup-java@c3ac5dd0ed8db40fedb61c32fbe677e6b355e94c
       if: steps.check-cache.outputs.cache-hit != 'true'
       with:
         java-version: '8'
         java-package: jdk
         architecture: x64
+        distribution: zulu
     - name: 'Run tests'
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}